Graal Forums

Graal Forums (https://forums.graalonline.com/forums/index.php)
-   Bomy Island Main Forum (https://forums.graalonline.com/forums/forumdisplay.php?f=80)
-   -   Trojan (https://forums.graalonline.com/forums/showthread.php?t=8250)

iSplash 07-27-2001 03:06 PM

Trojan
 
What e-mail was it that was sending the trojan, [email protected]? I recieved like 15 e-mails from this e-mail saying, i want your opinion! blarg, so I didnt download.

greezi 07-27-2001 05:17 PM

PLEASE POST THIS IN A DIFFERENT THREAD. D:

waar 07-27-2001 05:44 PM

Quote:

Originally posted by greezi
PLEASE POST THIS IN A DIFFERENT THREAD. D:
how can you post a thread in a different thread?

TheFox1 07-27-2001 05:54 PM

Quote:

Originally posted by greezi
PLEASE POST THIS IN A DIFFERENT THREAD. D:
Dark Dragon

grim_squeaker_x 07-27-2001 06:20 PM

Re: Trojan
 
Quote:

Originally posted by iSplash
What e-mail was it that was sending the trojan, [email protected]? I recieved like 15 e-mails from this e-mail saying, i want your opinion! blarg, so I didnt download.
You mean the SimCam virus? It actually sends depending on who's in your outlook address book.

BeZeRkEr 07-27-2001 06:45 PM

that virus is evil
lives in your recycle bin.. choose a number 1-30 and it does various things like filling up all free space on the comp with text in recycle bin
and since most virus checkers dont look in there its hard to fix it y0

SSmutz 07-27-2001 07:26 PM

Re: Trojan
 
Quote:

Originally posted by iSplash
What e-mail was it that was sending the trojan, [email protected]? I recieved like 15 e-mails from this e-mail saying, i want your opinion! blarg, so I didnt download.
I've been getting that too, everytime I do I put the sender on my block list.

sniperjoe10 07-27-2001 07:34 PM

I've been getting this virus too :/

BeZeRkEr 07-27-2001 07:46 PM

lol
i haven't gotten one yet

Admins 07-27-2001 08:33 PM

I am getting like 30 of them each day,
i guess half of the graal players have me
on their address list and are sending it to me

wetferret 07-27-2001 08:40 PM

I haven't gotten it i feel not loved

Merlin2 07-27-2001 08:42 PM

Quote:

Originally posted by Stefan
I am getting like 30 of them each day,
i guess half of the graal players have me
on their address list and are sending it to me

Stefan, put them on block you can easily get infected too :(

FatherDante 07-27-2001 08:45 PM

For that reason I do not keep an address list, such that I may spare myself the embarassment of spreading a trojan if I ever have one.

Notably, the sircam virus has blasted old records as the most proliferate virus in history. It's EVERYWHERE now.

revalation 07-27-2001 09:23 PM

Quote:

Originally posted by FatherDante
For that reason I do not keep an address list, such that I may spare myself the embarassment of spreading a trojan if I ever have one.

Me too.:)

Rekad 07-27-2001 09:39 PM

Quote:

Originally posted by FatherDante
For that reason I do not keep an address list, such that I may spare myself the embarassment of spreading a trojan if I ever have one.

Notably, the sircam virus has blasted old records as the most proliferate virus in history. It's EVERYWHERE now.

I dont either, and anything that I get sent usually ends up on the block list. Even if I do get a Virus, I have a fun program to help combat the virus :)

_0AfTeRsHoCk0_ 07-27-2001 09:47 PM

Well... I am a guild leader with over 50 members. My mail qouta is like always full :(

cheaterzx22 07-27-2001 11:01 PM

That virus is everywhere. Even i got sent this one, but i was smart enough not to run it.

LordAzeroth 07-27-2001 11:08 PM

It's fun when the Virus Scanner gets infected, then it clear all files but itself and then you delete the Virus Scanner, whee!

Komieko 07-28-2001 12:39 AM

I've had like a million trojans launched on me without accepting any file..I do virus scans all the time and Sub7 appeared and I thought since I had had sub7 is left a 'residue'..then the next day I scanned and I now had sub7gold infected on me and I've never used sub7 gold...SO I knew someone was infecting me without sendig files..forcing a download on my comp o.O

iSplash 07-28-2001 12:48 AM

Heh, no good. I didn't download it because it was entitled. NW_24leak.zip.idl. I didn't download it because idl? thats a file type, not a zip. I wouldve downloaded a zip then deleted if it didnt have levels, The first one I got was: Please help me with my levels by checking this out, i really appriciate it. Then i got 5 more lol, the text should say:"Hi! How are you?

I send you this file in order to have your advice

See you later. Thanks"

DO NOT DOWNLOAD ANYTHING THAT SAYS THIS, I REPEAT DO NOT DOWNLOD FILES FROM [email protected]

07-28-2001 01:14 AM

www.mcafee.com

It had instructions on how to get rid of it and everything. My mom had it on her computer, we followed instructions, and it fixed.


The virus attaches itself to every EXE opened.

BeZeRkEr 07-28-2001 03:29 AM

A new virus has been discovered that has the possibility to fill up users' hard drives, delete files, distribute private documents, hide itself from typical virus scanners, and propagate itself across the Internet using the Microsoft Outlook address book.
The Symantec Anti-Virus Research Center (SARC) has ranked the threat of the virus, entitled SirCam, a four, with five being the most serious. The McAfee Anti-Virus Emergency Response Team (AVERT), as well as the Trend Micro Virus Information Center, ranks the virus as a medium threat. SirCam also joined Trend's Worldwide Virus Tracker Top 10 list at number 3.

The virus usually comes as an e-mail attachment with the file name "SirCam32.exe." There are several payloads of the virus that randomly occur. One user could actually be a carrier of the virus but never be infected.

"When you run it, it does three things that are sort of odd and unusual," said Steve Trilling, director of SARC.




The first thing it does is compute a random number that has a 1 in 33 chance of triggering the machine to fill up all the remaining space on the hard disk by adding text to a system file in the Recycle Bin (c:recycledsircam.sys) at each startup.

Next, the virus will check to see if the date is October 16. If it is and the Windows operating systems is using a European date format (day/month/year), then it will again generate a random number that has a 1 in 20 chance of triggering the machine to delete all the files on the hard drive.

Finally, it will export a random document form the hard drive and append it to the body of the virus when it propagates itself to other users. This could present a privacy breach if the document is confidential.

Another unusual characteristic of the virus is that when it uploads a file from the hard drive to send to other users, it will append the file name with either .exe, .bat, .tif., .com, or .link. If it uses .link or .bat, the virus will essentially "neuter" itself, Trilling says, ceasing to operate.

The virus stores itself in the Microsoft Windows Recycle Bin, where most virus scanners don't scan for viruses.

Trilling says Symantec, which first discovered and issued a patch for the virus on Monday, has received 200 submissions of the virus from around the world, 40 of which were from corporate customers. McAfee has received 50 worldwide submissions, 30 over the evening between Wednesday night and Thursday morning.

The virus is also a worm, spreading by sending itself out to all the addressees in a person's Microsoft Outlook address book, and copies itself to any shared drives it finds.

The e-mail that people get is either in English or Spanish, and the body of the message varies although it typically looks like this:

Hi! How are you?

I send you this file in order to have your advice

I hope you can help me with this file that I send

I hope you like the file that I sendo(CQsendo) you

This is the file with the information that you ask for

See you later. Thanks

Patches have been available for download for most of the week from the major anti-virus software vendors. Those that don't fix their systems could have an ugly awakening October 16, Trilling says.

The last well-known virus to use a date as its trigger was the Chernobyl virus, which went off on April 26, 2000, the anniversary of the Chernobyl incident in Russia. That virus also was distributed months before the actual trigger date (August 1999), giving users plenty of time to patch their systems before the virus went off.

Vincent Gullotto, senior director of McAfee AVERT, says not everyone patches their anti-virus systems. Among McAfee's customer base, Gullotto says about 50 to 60 percent perform weekly updates, another 30 percent update monthly, and the rest either update less often or not at all.




omni-m00gle 07-28-2001 03:36 AM

Quote:

Originally posted by Komieko
I've had like a million trojans launched on me without accepting any file..I do virus scans all the time and Sub7 appeared and I thought since I had had sub7 is left a 'residue'..then the next day I scanned and I now had sub7gold infected on me and I've never used sub7 gold...SO I knew someone was infecting me without sendig files..forcing a download on my comp o.O
! WIZARDGODZ!

BeZeRkEr 07-28-2001 03:42 AM

lol
funnylink is sending people sub7 server
he calls it pearldouble.exe and give it to n00bs >_<
he said to me "i wanna show you the matrix thing"
im helllll nO!@#
i infected myself once.. i used norton to get rid of it.. and all the dlls on my comp got deleted >_< so i had to reinstall windows and my ddrivers >_<

_0AfTeRsHoCk0_ 07-28-2001 05:11 AM

If you have ICQ and you have a sub7 the ICQ network keeps sending you warnings... "web pagers" (that's what it's called) and I think it gives you an IP, not totally sure

07-28-2001 05:12 AM

Re: Trojan
 
Quote:

Originally posted by iSplash
What e-mail was it that was sending the trojan, [email protected]? I recieved like 15 e-mails from this e-mail saying, i want your opinion! blarg, so I didnt download.

I got e-mails from someone kiiitty cat saying that, with a holiday inn thing attached. I know it's a virus.

Solareon 07-28-2001 05:55 AM

ooooooooohhhhhhh
 
If you get it as a .doc try make the file viewable in notepad and you can find out what is actually in the document without infecting yourself. Last time I got this was from someguy with his resume. Full contact info and everything *grin*. If stefan did block the people sending out the message he' have a lot less mail in his folder to sort through and important people would get replies

BeZeRkEr 07-28-2001 10:20 AM

sub7 is for n00bie hax0rz y0
people who connect to you can send icq pager messages.. they can make your desktop flip too.. hide your mouse.. its scary

konidias 07-28-2001 10:43 AM

My email service auto detects trojan viruses in emails.. www.netaddress.com IT OWNS YOU

I have gotten around 10 this week alone.. You aren't alone stefan =/

Dilrod_Elven 07-28-2001 12:32 PM

i dont use my email@all period just to mess with my graal acct nothing else

07-28-2001 12:52 PM

Maybe GraalMail is down because of this?

galen 07-29-2001 06:21 AM

If people wern't so stupid this type of thing would never happen. KILL ALL THE STUPID PEOPLE

Crono Illusion 07-29-2001 06:25 AM

An FBI member got this virus and a confidential document was leaked. Also, I feel unliked too, because I have received not a single file infected with the SirCam worm.

BeZeRkEr 07-29-2001 06:26 AM

its not really stupid peoples fault y0
the programmer of this virus made it very smart
it sends to all users on your outlook list even without you tellling to
if you're sharing a drive.. it finds it and get into your system
its rated 4 of 5, 5 being the most dangerous viruses

Crono Illusion 07-29-2001 06:33 AM

Quote:

Originally posted by BeZeRkEr

it sends to all users on your outlook list even without you tellling to
if you're sharing a drive.. it finds it and get into your system

A lot of viruses do that. However, this one is infecting rapidly worldwide primarily because it attaches a random file from the recently infected user's hard drive.

Valder_2 07-29-2001 09:01 AM

People who make viruses do it for revenge

FatherDante 07-29-2001 09:30 AM

Well, they don't all do it for the same reasons...
But, I think Sircam may be a catalyst for realization of needs for better virus protection, with long term good effects. Of course, that's just my optimistic take.

Crono Illusion 07-29-2001 12:48 PM

Quote:

Originally posted by Valder_2
People who make viruses do it for revenge

No, they don't.
There's no one reason that motivates every virus writer to write a virus.

Trojans like Sub7, however, could be used for the purpose of revenge.

activeconvict 07-29-2001 02:32 PM

There has been a lot at [email protected]

07-29-2001 02:59 PM

Quote:

Originally posted by iSplash
Heh, no good. I didn't download it because it was entitled. NW_24leak.zip.idl. I didn't download it because idl? thats a file type, not a zip. I wouldve downloaded a zip then deleted if it didnt have levels, The first one I got was: Please help me with my levels by checking this out, i really appriciate it. Then i got 5 more lol, the text should say:"Hi! How are you?

I send you this file in order to have your advice

See you later. Thanks"

DO NOT DOWNLOAD ANYTHING THAT SAYS THIS, I REPEAT DO NOT DOWNLOD FILES FROM [email protected]

It's not just molson@cyberbeach, I got one from like an r45fjjj34 weird address, and one from someone named kiitty cat.


And Crono, don't feel bad. It just means you know smart people, not idiots.


All times are GMT +2. The time now is 11:12 PM.

Powered by vBulletin® Version 3.8.11
Copyright ©2000 - 2025, vBulletin Solutions Inc.
Copyright (C) 1998-2019 Toonslab All Rights Reserved.